Static task
static1
Behavioral task
behavioral1
Sample
Full&FInal-[2022_Pasword]-ActivesFiles.rar
Resource
win10v2004-20220812-en
General
-
Target
Full&FInal-[2022_Pasword]-ActivesFiles.rar
-
Size
1.6MB
-
MD5
df7f3e2f31df564b231375609dfae412
-
SHA1
9132d06af2b4d4ac3ed88d500a42d2155c2b2130
-
SHA256
9d8d13de886e90b1ed9e58f8d6a6bb0b3bd452615e50105c505f80e852fa6d53
-
SHA512
3aa7123c88abc08a4527c49fb078439180a14c50b63a6ee3a9cc20317a603b1aa69ae2c8d2dbc1526896d6bf4600617fd8b81ebd4087c09b3676acdde426283f
-
SSDEEP
49152:UncMjnLJbYFxQaXhGbPNwGFAneZDu8RHkXO:UnvTLJbYFxLhGLXFd68WXO
Malware Config
Signatures
Files
-
Full&FInal-[2022_Pasword]-ActivesFiles.rar.rar
Password: 2022
-
1Setup.exe.exe windows x64
Password: 2022
Code Sign
3f:dc:7a:3e:7e:96:5e:b6:4e:3a:1a:ce:c7:32:b0:e3Certificate
IssuerCN=Logitech ZC-9015 USA State of WashingtonNot Before24-12-2022 20:59Not After25-12-2032 20:59SubjectCN=Logitech ZC-9015 USA State of Washington90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before11-05-2022 00:00Not After10-08-2033 23:59SubjectCN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
94:12:9d:97:b2:71:51:cd:aa:33:db:7d:62:6d:8a:3a:b7:b5:3f:b9:80:3d:30:32:5a:6e:72:6b:7e:4c:a7:25Signer
Actual PE Digest94:12:9d:97:b2:71:51:cd:aa:33:db:7d:62:6d:8a:3a:b7:b5:3f:b9:80:3d:30:32:5a:6e:72:6b:7e:4c:a7:25Digest Algorithmsha256PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Logitech ZC-9015 USA State of Washington15-12-2022 14:03 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 154KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Langs/Cr0atian.ini
-
Langs/Danish.ini
-
Langs/English.ini
-
Langs/Finnish.ini
-
Langs/Hebrew.ini
-
Langs/Hungarian.ini.ps1
-
Langs/Ind0nesian.ini
-
Langs/Japanese.ini
-
Langs/Kazakh.ini
-
Langs/Korean.ini.ps1
-
Langs/Kurdish.ini
-
Langs/Norwegian.ini
-
Langs/SimpChinese.ini
-
Langs/Sinhala.ini
-
Langs/Sl0vak.ini
-
Langs/Swedish.ini
-
Langs/Thai.ini
-
Langs/TradChinese.ini
-
Langs/Ukrainian.ini
-
Langs/UyghurLatin.ini
-
Langs/Uzbek.ini
-
Langs/Vietnamese.ini
-
MoreInf0s.txt